20:00Min. left

PDF|

Guide for NCP-NS: Nutanix Certified Professional Network & Security v7.5

Quiz NCP-NS: Nutanix Certified Professional Network & Security v7.5

Updated on 2026/10/08

PDF|

Guide for NCP-NS: Nutanix Certified Professional Network & Security v7.5

Updated on 2026/10/08

Randomized | 10 Questions per Test | 20 Minutes | 70% to pass

Learning Mode

Free Test

Question: / 10

20:00Min. left

Question: / 10

4.8

Quiz

Question 1/101/10

What does placing a policy in Monitor mode accomplish?

Select the answer:Select the answer

1 correct answer

Visualizes discovered traffic that matches the policy.

Blocks traffic that does not match the policy.

Enables hitlogs for traffic that matches the policy.

Redirects discovered traffic to a monitoring device.

Quiz

Question 2/102/10

An administrator sets up a VPN between two Nutanix VPCs in different Availability Zones. After
deployment, the VPN tunnel shows as Up, but traffic between the VPCs is not flowing.
Which configuration step is most likely missing?

Select the answer:Select the answer

1 correct answer

NAT policy on each of the VPC routers

IPsec encryption settings on the VPN profile

MTU adjustment on the AHV hosts

Static routes for remote subnets on the VPC

Quiz

Question 3/103/10

An administrator plans to upgrade a Nutanix cluster running AHV and Prism Central. The current
cluster is on AOS 6.10, and the administrator wants to move to AOS 7.3 while ensuring all
components remain compatible.
What is the correct upgrade order to minimize downtime and maintain cluster functionality?

Select the answer:Select the answer

1 correct answer

Upgrade CVMs -> Upgrade cluster AOS -> Upgrade Prism Central -> Upgrade AHV hosts

Upgrade cluster AOS -> Upgrade AHV hosts -> Upgrade Prism Central -> Upgrade CVMs

Upgrade Prism Central -> Upgrade AHV hosts -> Upgrade CVMs -> Upgrade cluster AOS

Upgrade AHV hosts -> Upgrade cluster AOS -> Upgrade Prism Central -> Upgrade CVMs

The correct answer is A. Upgrade CVMs -> Upgrade cluster AOS -> Upgrade Prism Central -> Upgrade AHV hosts
In a Nutanix environment, the safest upgrade sequence is the one that keeps the control plane and storage layer aligned before moving to the hypervisor and management components. Since the cluster is already running AOS 6.10 and the goal is to reach AOS 7.3 while maintaining compatibility, the upgrade order should preserve cluster stability and minimize service disruption.
Why A is correct:
1. Upgrade CVMs first
The Controller VMs (CVMs) are central to Nutanix cluster operations because they manage storage services and cluster coordination. Upgrading them first ensures the cluster management layer is ready for the newer AOS version.
2. Upgrade cluster AOS next
AOS is the core Nutanix software stack. Upgrading the cluster AOS after the CVMs aligns the storage and cluster services with the target version, which is essential before making changes to external management layers.
3. Upgrade Prism Central after the cluster AOS
Prism Central is a management plane component and should be upgraded after the cluster is on the target-compatible AOS version. This helps ensure Prism Central can properly communicate with and manage the upgraded cluster.
4. Upgrade AHV hosts last
AHV is the hypervisor layer. Upgrading it last reduces the risk of compatibility issues during the storage and management upgrades. This sequencing also helps avoid conflicts with the cluster services that depend on the hypervisor environment.
Why the other options are incorrect:
B. Upgrade cluster AOS -> Upgrade AHV hosts -> Upgrade Prism Central -> Upgrade CVMs
This is incorrect because CVMs should not be upgraded after the cluster AOS in this sequence. The CVMs are part of the cluster management and storage stack and typically need to be aligned before or during the AOS upgrade process.
C. Upgrade Prism Central -> Upgrade AHV hosts -> Upgrade CVMs -> Upgrade cluster AOS
This order is not ideal because Prism Central is upgraded too early, before the underlying cluster stack is brought to the target AOS version. That can lead to compatibility issues.
D. Upgrade AHV hosts -> Upgrade cluster AOS -> Upgrade Prism Central -> Upgrade CVMs
This is also incorrect because AHV is upgraded before the cluster AOS and CVMs, which can introduce compatibility risks and unnecessary downtime.
Key takeaway:
For Nutanix upgrades, always prioritize the cluster foundation first:
CVMs and AOS, then Prism Central, and finally AHV hosts.
This sequence preserves compatibility and reduces the chance of service disruption during the upgrade.

Right Answer: A

Quiz

Question 4/104/10

Which step is required to prepare an AHV cluster for Flow Virtual Networking?

Select the answer:Select the answer

1 correct answer

Assign all VMs to a single VLAN before enabling Flow.

Configure static routes for all overlay networks before enabling Flow.

Disable all existing microsegmentation policies to allow virtual networking.

Ensure all CVMs have network connectivity to Prism Central.

Quiz

Question 5/105/10

An administrator is deploying a multi-tier application on a Nutanix AHV cluster. The Web tier needs
to be accessible from the internet, the App tier must communicate only with the Web tier and the
Database tier, and the Database tier should accept traffic only from the App tier.
The administrator must determine the correct configuration to ensure secure, reliable connectivity
for the Web tier while maintaining isolation from the Internet for the App and Database tiers.
Which connectivity option should the administrator implement to meet the requirements?

Select the answer:Select the answer

1 correct answer

Assign direct external IPs to all VMs in the VPC.

Use overlay networks for the Web tier to provide internet access.

Assign Floating IP assignments to Web tier only.

Connect all tiers directly to the external network with no NAT.

The correct answer is C. Assign Floating IP assignments to Web tier only.
This question is about how to design connectivity for a multi-tier application in Nutanix AHV so that only the Web tier is reachable from the internet, while the App and Database tiers remain isolated from direct internet exposure.
Key requirements:
- Web tier: must be accessible from the internet
- App tier: must communicate only with the Web tier and Database tier
- Database tier: must accept traffic only from the App tier
- The App and Database tiers should not be directly accessible from the internet
Why C is correct:
A Floating IP in Nutanix is used to map a private VM address to a public-facing or externally reachable address. This allows external users to reach the Web tier without exposing the internal IPs of the Web, App, or Database VMs directly.
By assigning Floating IPs only to the Web tier:
- Internet users can reach the Web tier
- The App tier and Database tier stay on private/internal addressing
- Traffic flow can be controlled using security policies and tier-to-tier rules
- This supports both secure access and proper isolation
Why the other options are incorrect:
A. Assign direct external IPs to all VMs in the VPC.
This would expose all tiers, including App and Database, directly to the internet. That violates the security requirement and removes isolation.
B. Use overlay networks for the Web tier to provide internet access.
Overlay networks are useful for internal logical networking, but by themselves they do not provide internet reachability. Additional external connectivity such as Floating IPs or NAT is needed.
D. Connect all tiers directly to the external network with no NAT.
This is the least secure option. It exposes all tiers directly and does not provide the required separation between public and private components.
Summary:
The best approach is to give only the Web tier Floating IPs so it can be accessed from the internet, while the App and Database tiers remain private and protected. This meets the requirement for secure, reliable connectivity and proper tier isolation.

Right Answer: C

Quiz

Question 6/106/10

An administrator must delegate management of a single tenant VPC to a junior engineer. The
engineer should be able to modify that VPC but must not see or change any other VPCs or
networking configurations in Prism Central.
The administrator wants to meet this requirement using RBAC.
Which action should the administrator take to meet this requirement?

Select the answer:Select the answer

1 correct answer

Assign the Network Infrastructure Admin role and restrict its scope to the desired VPC.

Assign the VPC Admin role and restrict its scope to the desired VPC.

Assign a Custom Role cloned from Network Infrastructure Admin and restrict its scope to the desired VPC.

Assign a Custom Role cloned from VPC Admin and restrict its scope to the desired VPC.

Quiz

Question 7/107/10

An administrator uses Nutanix Flow to secure a three-tier application (Web, App, and Database tiers).
After observing the traffic, they find that:
The Web tier communicates with the App tier over HTTP (port 80)
The App tier communicates with the Database tier over TCP port 1433
The Database tier does not initiate connections
The Web tier receives inbound HTTP traffic from the corporate DMZ on port 8080
No other traffic should be allowed
What should the administrator do to document and then securely apply these flows in Nutanix Flow?

Select the answer:Select the answer

1 correct answer

Use Flow Network Visualization to capture observed flows and convert them into microsegmentation security policies.

Add all VMs to a single security policy to simplify communication.

Disable traffic-flow discovery and configure all policies manually.

Manually create isolation policies between all VMs in the environment.

The correct answer is A. Use Flow Network Visualization to capture observed flows and convert them into microsegmentation security policies.
Nutanix Flow is designed to help administrators discover application traffic patterns and then enforce security using microsegmentation policies. In this scenario, the administrator has already observed the required communication paths:
- Web tier to App tier over HTTP on port 80
- App tier to Database tier over TCP 1433
- Database tier does not initiate any connections
- Corporate DMZ to Web tier on port 8080
- No other traffic allowed
Flow Network Visualization is the feature used to monitor and document these communication patterns. Once the traffic is understood, the administrator can convert the observed flows into security policies that allow only the required connections and deny all others.
Why A is correct:
- It matches the intended Flow workflow: discover traffic first, then create microsegmentation rules.
- It supports documenting actual application dependencies before enforcement.
- It helps ensure least-privilege access by allowing only the required ports and directions.
Why the other options are incorrect:
B. Add all VMs to a single security policy to simplify communication.
- This would be too broad and would not enforce proper segmentation.
- It would likely allow more traffic than required, violating the “no other traffic should be allowed” requirement.
C. Disable traffic-flow discovery and configure all policies manually.
- Flow Network Visualization is specifically useful for identifying application traffic.
- Manually creating everything is possible, but it is not the best answer because the question asks how to document and then securely apply these flows in Nutanix Flow.
D. Manually create isolation policies between all VMs in the environment.
- Isolation policies would block communication, including the required legitimate flows between tiers.
- That would break the application rather than secure it properly.
Summary:
The administrator should use Flow Network Visualization to discover the application’s traffic patterns and then convert those observed flows into microsegmentation security policies. This provides both documentation and secure enforcement based on least privilege.

Right Answer: A

Quiz

Question 8/108/10

What is the additional resource requirement for each Prism Central VM when enabling Flow Virtual
Networking on a Small Prism Central deployment?

Select the answer:Select the answer

1 correct answer

2 GB of memory and 1 vCPUs

3 GB of memory and 2 vCPUs

4 GB of memory and 3 vCPUs

5 GB of memory and 4 vCPUs

Quiz

Question 9/109/10

How can the administrator discover the root cause of the issue?

Select the answer:Select the answer

1 correct answer

Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.

Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.

Check the security policies again to ensure that the rule allowing port 3306 from Web -> Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.

Quiz

Question 10/1010/10

An administrator has deployed a microsegmentation policy in Nutanix Flow that allows certain VM
traffic based on Active Directory (AD) user group membership.
Users in a specific AD group report they are unable to access the VMs, while other users can connect
without issues. The administrator suspects the problem is related to identity-based policy mapping.
What should the administrator do to troubleshoot and resolve the access issue related to the
identity-based policy?

Select the answer:Select the answer

1 correct answer

Add the IP addresses of the blocked VMs to the Inbound ruleset.

Ensure the VMs are associated to the proper AD group categories.

Reboot all VMs associated with the policy to refresh their security group mapping.

Verify that the affected users are members of the mapped AD group.

Looking for more questions?Buy now

NCP-NS: Nutanix Certified Professional Network & Security v7.5 Practice test unlocks all online simulator questions

Thank you for choosing the free version of the NCP-NS: Nutanix Certified Professional Network & Security v7.5 practice test! Further deepen your knowledge on Nutanix Simulator; by unlocking the full version of our NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator you will be able to take tests with over 106 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 106 questions.

BUY NOW

What to expect from our NCP-NS: Nutanix Certified Professional Network & Security v7.5 practice tests and how to prepare for any exam?

The NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator Practice Tests are part of the Nutanix Database and are the best way to prepare for any NCP-NS: Nutanix Certified Professional Network & Security v7.5 exam. The NCP-NS: Nutanix Certified Professional Network & Security v7.5 practice tests consist of 106 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The NCP-NS: Nutanix Certified Professional Network & Security v7.5 database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator will also give you an idea of the time it will take to complete each section of the NCP-NS: Nutanix Certified Professional Network & Security v7.5 practice test . It is important to note that the NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator does not replace the classic NCP-NS: Nutanix Certified Professional Network & Security v7.5 study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the NCP-NS: Nutanix Certified Professional Network & Security v7.5 exam.

BUY NOW

NCP-NS: Nutanix Certified Professional Network & Security v7.5 Practice test therefore represents an excellent tool to prepare for the actual exam together with our Nutanix practice test . Our NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator and how our unique NCP-NS: Nutanix Certified Professional Network & Security v7.5 Database made up of real questions:

Info quiz:

Quiz name:NCP-NS: Nutanix Certified Professional Network & Security v7.5
Total number of questions:106
Number of questions for the test:50
Pass score:80%

You can prepare for the NCP-NS: Nutanix Certified Professional Network & Security v7.5 exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator.

Use our Mobile App, available for both Android and iOS devices, with our NCP-NS: Nutanix Certified Professional Network & Security v7.5 Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all NCP-NS: Nutanix Certified Professional Network & Security v7.5 practice tests which consist of 106 questions and also provide study material to pass the final NCP-NS: Nutanix Certified Professional Network & Security v7.5 exam with guaranteed success. Our NCP-NS: Nutanix Certified Professional Network & Security v7.5 database contain hundreds of questions and Nutanix Tests related to NCP-NS: Nutanix Certified Professional Network & Security v7.5 Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW

Quiz NCP-NS: Nutanix Certified Professional Network & Security v7.5

Free Test - Simulator NCP-NS: Nutanix Certified Professional Network & Security v7.5

NCP-NS: Nutanix Certified Professional Network & Security v7.5 Practice test unlocks all online simulator questions

What to expect from our NCP-NS: Nutanix Certified Professional Network & Security v7.5 practice tests and how to prepare for any exam?